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BACKGROUND OF THE INVENTION 



1. Field Of The Invention 

The present invention relates to a method of managing changes of time-slot 
allocations in ring networks protected by a transoceanic MS-SPRING protection mechanism. 

2. Description Of The Prior Art 

In SDH MS-SPRING (Multiplex Section Shared Protection Ring) networks, a shared 
protection mechanism is implemented, which mechanism allows for the automatic restoration 
of the traffic in case of defects or failures in the connection fibers. In other words, the MS 
shared protection ring networks perform the automatic restoration of the traffic through a 
synchronized re-routing of said traffic, performable at each node of the ring. This operation is 
controlled by a protocol consisting of messages that are continuously interchanged between 
adjacent nodes. Said protocol and the related operations are defined by several international 
standards issued by ANSI, ITU-T and ETSI and they are characterized by a set of rules and 
messages. See, for instance, Recommendation ITU-T G. 841. 

Protection in an MS shared protection ring network is implemented according to a so- 
called Bridge and Switch technique that consists essentially in re-routing the traffic, by means 
of an appropriate modification in the internal connections of the network elements, switching 



it from the working capacity to the protection capacity. The protection in an MS shared 
protection ring network is a multiplex section-oriented protection mechanism, i.e. the events 
defining the traffic restoration and the hierarchy that regulates those events are given at 
multiplex section level. In the "classic" (or terrestrial) MS shared protection rings, in the 
event of a failure, the whole high-priority line capacity is re-routed by utilizing the 
corresponding low-priority line capacity; in the transoceanic MS shared protection rings, on 
the contrary, only the paths affected by a failure are selectively re-routed. 

It is also known that the ring networks provide for a mechanisms termed "Time Slot 
Interchange", in short TSI. TSI means, for instance, that when traffic is configured in a given 
ring network, such a traffic, which is carried in the associated STM-n and hence in the AU-4 
contained in the STM-n, is allowed to travel through a network element occupying different 
AU-4 numbers at the input and at the output. Consider for instance a maximum capacity of a 
four-fiber ring, composed of sixteen AU-4s. The TSI mechanism allows one to enter a 
network element (of pure transit and where no termination occurs) with AU-4#X from its 
West side (W) and to go out from its East side (E) with an AU-4#Y, where X*Y =1,2,..., 
16. The advantage is a greater flexibility in the traffic allocation and a very efficient 
exploitation of the band. 

At present, performing TSI in ring networks protected by an MS-SPRING protection 
mechanism is not known. In particular, it is not known to perform allocation changes in 
transoceanic MS shared protection ring networks. 

SUMMARY OF THE INVENTION 

Therefore, the main object of the present invention is to provide a method allowing 
the execution of allocation changes in transoceanic rings protected by an MS-SPRING 
mechanism. This and further objects are achieved by a method having the features set forth in 

2 



independent claim 1 and a network element according to claim 8. The respective dependent 
claims define further advantageous characteristics of the invention itself. All the claims are 
intended to be an integral part of the present description. 

The basic idea of the present invention consists substantially in protecting the high- 
priority traffic by assigning, in case of a ring failure, the low-priority channel time slots 
chosen according to the real failure location and to the instant at which such failure has 
occurred, with respect to other failures possibly already present. 

The invention will certainly become clear in view of the following detailed 
description, given by way of a mere non limiting and exemplifying example. 



BRIEF DESCRIPTION OF THE DRAWINGS 



In the drawings: 

Fig. 1 shows a ring network in a stable faultless situation, the network having a 

plurality of nodes, two installed paths and some allocation changes; 

Fig. 2 shows the same ring network of Fig. 1 just after a ring failure took place; 

Fig. 3 shows the ring network of Fig. 2 in a stable situation with a ring failure; 

Figs. 4 show the signaling that is received/generated by the single nodes and the 

corresponding actions performed in the event of simultaneous double failure; 

Figs. 5 show the signaling that is received/generated by the single nodes and the 

corresponding actions performed in the event of nearly simultaneous double failure; 

Figs. 6 show the signaling that is received/generated by the single nodes and the 

corresponding actions performed in the event of double failure at different times (first 

sub-scenario); 
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Figs. 7 show the signaling that is received/generated by the single nodes and the 
corresponding actions performed in the event of double failure at different times 
(second sub-scenario); 

Figs. 8 show the signaling that is received/generated by the single nodes and the 
corresponding actions performed in the event of clearing of a first failure; and 
Figs. 9 show the signaling that is received/generated by the single nodes and the 
corresponding actions performed in the event of clearing of a second failure. 

BEST MODE FOR CARRYING OUT THE INVENTION 

In the various figures, a four-fiber transoceanic telecommunication ring has been 
always depicted. The two working fibers (otherwise known as "high-priority channels" or 
"HP channels") are indicated by solid-line arrows whereas the protection fibers (otherwise 
known as "low-priority channels" or "LP channels") are indicated by dashed-line arrows. 
Naturally, the present invention applies both to the illustrated case of bi-directional traffic and 
to the case of unidirectional traffic. 

Moreover, the present invention is applicable also to rings in which the traffic 
subjected to TSI is configured with "channel concatenation (AU4)". 

The ring illustrated to describe the invention comprises ten network elements or 
nodes, represented by blocks and designated by respective numerals (1 to 10). The West (W) 
and East (E) sides of each node are indicated. The term "span" is used throughout this 
description to mean that part between two adjacent nodes, for instance between nodes 1 and 2 
or the one between nodes 7 and 8. 

In the ring there are depicted, by way of a non-limiting example, two paths installed, 
"path (a)" and "path (b)". The first path (path a) is depicted by a bolt solid line whereas the 
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second path (path b) is depicted by a bolt dotted line. Path (a) is inserted at node 2 and is 
dropped at node 8. Path (b) is inserted at node 4 and is dropped at node 9. 

Finally, it has been tried to clearly indicate (with numbers after symbol "#") the 
various time slots in which the various paths are allocated, span by span. Thus it has been 
also indicated if a Time Slot Interchange (TSI) occurs at a node or if that node allows that 
path to transit without changing the AU-4 on which it is allocated. 

The present invention contemplates the general criteria set forth below: 

I) single failure: once a ring failure has occurred in a given span, a ring switch action is 
performed by the MS shared protection mechanism. This activity defines the set of re- 
routable paths, namely all the paths whose nominal route includes the failured span. 
According to the present invention, each of these paths is re-routed on the time slot of the 
low-priority (LP) channels corresponding to the time slot of the high-priority (HP) channels 
of the failured span. There is no risk of any conflict since the LP time-slot assignment 
criterion is the same for all the failured paths. 

II) double failure: if a failure occurs at a further span and the path can still be saved, then 
II.I) i) the actual re-routing is released; ii) among the two failured spans one is chosen 
according to a certain criterion; and iii) the path is re-routed over the time slot of the low- 
priority (LP) channels corresponding to the time slot of the high-priority (HP) channels of the 
selected failured span. Should multiple (more than two) failures occur, the choice of the span 
to consider for the TSI path protection is to be made by selecting, according to the above 
criterion, among the spans adjacent to the switching nodes that are able to communicate with 
the termination nodes of the path to be protected. There is no risk of any conflict since the LP 
time-slot assignment criterion is the same for all the paths affected by the failure. In this way, 
any transient misconnection is avoided. 

II.II) The actual re-routing is not released when the persistency of the re-routing 
information is supported by the ring network elements. 
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The procedures that are implemented by each node of the ring (in addition to the 
procedures already provided for by the MS shared protection mechanism) will be indicated 
below: 

A. If, at both W and E sides of the node, two Bridge Requests with an "Idle" 
status code concerning the same span (single failure) are detected, then each path comprising 
the span in question is re-routed over the LP time slot equal to the HP time slot of the (sole) 
span affected by the failure. In other words, if the node is a path termination node (a node 
where the path to be re-routed is inserted or dropped), the Bridge & Switch action is 
performed by utilizing the LP time slot equal to the HP time slot of the span affected by the 
failure. 

Al. If at W or E side of the node at least one Bridge Request with an "Idle" status 
code is detected, a pass-through is performed, if necessary, by utilizing the same LP time slot 
(LP time slot equal to the HP time slot of the span affected by the failure). 

B. If at both W and E sides of the node Ridge Requests with a "Bridged and 
Switched" status code concerning different spans (multiple failures) are detected, then each 
path comprising the spans in question is re-routed over the LP time slot equal to the HP time 
slot of the span affected by the failure that has been chosen according to a fixed criterion. The 
criterion for selecting one among the failed spans could, for instance, be any one of the 
following: 

a) the failed span adjacent to the switching node with higher (or lower) node 
identification is chosen; 

b) the failed span adjacent to the switching node coming first (or last) in the ring map; 

or 

c) the failed span adjacent to the switching node that is "far West" or "far East" node 
in the ring. 
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Similarly to the above case A, if the node in question is a path termination node (node 
in which the path to be re-routed is inserted or dropped), the Bridge & Switch action is 
performed by utilizing the LP time slot equal to the HP time slot of the selected failured span. 

B 1 . If at the W or E side of the node at least one Bridge Request with "Bridged and 
Switched" status code is detected, a pass-through is performed, if necessary, by utilizing the 
same LP time slot as above. 

C. In an optimized embodiment, should a path re-routing due to single failure be 
under way, if at W and E sides of the node Bridge Requests with a different ("Idle" or 
"Bridged and Switched") status code that carry the indication of a second failure, hence 
located at a different span, are detected, then, for each path that has already been re-routed, it 
is evaluated if the new requests exhibit a failured state that requires to release or maintain the 
present re-routing. It is not necessary to release the actual re-routing of a single path in the 
following cases: 

i) when a failure is detected in addition to the already existing failure/s (and such new 
failure/s does/do not result in the "isolation" condition of any of the termination nodes of the 
already protected path); or ii) when the last occurred span failure has been removed. 

It is understood how the persistency of the path re-routing condition is strictly 
connected to the coexistence of the aforesaid triggers at both sides of the nodes. This 
behavior results in the correct re-routing of the failured paths, namely it prevents 
misconnections from being created during transient states of the ring protection mechanism. 

Note that the above is applicable to the case of bi-directional path and unidirectional 
one not using the inverse route. Clearly, if two unidirectional paths are allocated on the same 
time slot (in opposite directions), then the same LP time slot can be assigned to both paths. 

Fig. 1 shows a transoceanic MS shared protection ring protected against failures in 
accordance with the invention, at some nodes of the ring Time-Slot Interchange (TSI) 
occurring. The installed paths are two: (a) and (b). Path (a) enters the ring at node 2 and is 
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allocated on the AU-4 #1; therefore, in span 2-3 the allocation is AU-4#1; at node 3 the 
allocation is unchanged (therefore it remains AU-4#1); at node 4, the allocation is changed 
from AU-4#1 to AU-4#3; in span 4-5 the allocation is therefore AU-4#3; at node 5 the 
allocation is not changed (therefore it remains AU-4#3); in span 5-6 the allocation is 
therefore AU-4#3; at node 6 the allocation is changed from AU-4#3 to AU-4#7; therefore, in 
span 6-7 the allocation is AU-4#7; at node 7 the allocation changes again from AU-4#7 to 
AU-4#6; therefore, in span 7-8 the allocation is AU-4#6; finally, path (a) is dropped at node 
8. For path (b): it enters at node 4 and is allocated on AU-4#1; this allocation is maintained 
up to node 6 where it changes from AU-4#1 to AU-4#6; it is changed again at node 7 
(passing from AU-4#6 to AU-4#7) and at node 8 (passing from AU-4#7 to AU-4#6). Finally, 
path (b) is dropped at node 9. 

In the event of a ring failure (namely, a failure that makes both high-priority (HP) 
channels and low-priority (LP) channels useless), the present invention provides for a method 
of remedying such failure notwithstanding the presence of allocation changes in the ring. 
Reference should be made, for the event of single ring failure, to Figs 2 and 3 where a ring 
failure in the span 6-7 has been simulated. 

As it is known, the management of failures in the synchronous (SDH or SONET) 
telecommunications networks occurs, for some protection types among which the MS- 
SPRING one, through bytes Kl and K2 of the frame overhead. Since the present invention 
does not concern specifically such bytes Kl and K2, a more precise description thereof will 
not be given, the reader having the possibility to refer to relevant Recommendations, for 
instance the ITU-T Recommendation G. 841, incorporated herein by reference. 

In the event of a failure, the nodes (6 and 7) that are adjacent to the failure will send, 
as usual, proper failure signaling in the direction opposite to the failure. The structure of the 
request (APS signaling) is the following: Bridge Request, Destination Node ID, Source Node 
ID, Type of Path, Protection Status. In this instance, the node 6 will send a signaling of the 
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type SF,7,6,L,ID (Signal Fail, Destination Node: 7, Source Node: 6, Path: Long, Protection 
Status: Idle) to indicate that a ring failure occurred at span 6-7 and that no action has been 
taken for the time being. Node 7 will do the same by sending a signaling type SF,6,7,L,ID 
from its East side (E). 

Such signaling will travel down the ring in opposite directions and will be received by 
termination nodes (2, 8; 4, 9) of paths (a) and (b) that will perform the requested Bridge and 
Switch (BR & SW) by utilizing the LP channels. In accordance with the present invention, 
the ring protection (BR&SW and pass-through), in the event of single ring failure, is 
performed by squelching the terminations of LP traffic allocated on the AU-4s corresponding 
to the failured span and by allocating the HP traffic on such AU-4s. With reference to Fig. 3, 
since in span 6-7 the path (a) was allocated on the HP AU-4#7 and the path (b) was allocated 
on the HP AU-4#6, the allocation AU-4#7 (of the LP channels) will be utilized for the first 
path and the allocation AU-4#6 (of the LP channels) will be utilized for the second path. 

Should TSI be configured also on low-priority traffic, the high-priority traffic 
protection that requires the use of one of the LP channels utilized in the low-priority TSI, will 
anyway result in the squelching action on both the low-priority traffic terminations. 

Once a node adjacent to the failure has received the signaling sent by its homologous 
opposite side, with Protection Status corresponding to "Idle", the node itself will send a 
modified signaling (with Protection Status = Bridged & Switched, BS). In other words, node 
6 will send SF,7,6,L,BS from its West side whereas node 7 will send SF,6,7,L,BS from its 
East side. Upon restoration of the full ring functionality (fault clearing) the BR&SW will be 
removed and the failure signaling (SF,7,6,L,BS and SF,6,7,L,BS) will be removed. 

The present invention, in addition to the single failure event illustrated above, 
provides for a traffic protection method applicable to multiple failures leading to isolation of 
one or more nodes in which the TSI of the installed path/s is configured. Within this context 
three failure scenarios are considered and separately described: in the first scenario the 
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failures occur simultaneously, in the second scenario the failures occur nearly simultaneously 
while in the third scenario the failures occur at different times. 

Referring initially to Figs. 4, consider the case where two failures (SF1 and SF2) 
occur exactly at the same time instant. For simplicity, paths (a) and (b) before the occurrence 
of the failures, are allocated in a manner similar to what described for Fig. 1 and therefore the 
description of the allocations will not be repeated here. Upon the occurrence of the first 
failure (SF1) on the span 6-7, the node 6 (Fig. 4.1) will send a failure signaling (SF,7,6,L,ID) 
from the West side whereas, upon the second failure (SF2) on the span 7-8, node 8 will send 
a simultaneous failure signaling (SF,7,8,L,ID) from the East side (Fig. 4.2). 

At the time when each of the two signaling with "Idle" code, which were generated by 
the switching nodes, is received by the termination nodes of the paths to be protected, 
squelching of the local termination (if any) of the LP channel corresponding to the HP 
channel allocated in the failed span to which the signaling is referred, takes place; while, at 
the nodes designed to realize the pass-through of the LP channels, the squelching of the local 
termination (if any) of the LP channel corresponding to the HP channel allocated in the failed 
span to which the signaling is referred takes place and the subsequent pass-through 
connection also takes place. The actions just described (squelching and squelching + pass- 
through) are removed both from the path termination nodes and from the pass-through nodes, 
as soon as such nodes receive the second signaling generated by the switching nodes. 

When (Fig. 4.3) the signaling (SF,7,6,L,ID) containing the "Idle" code of SF1 reaches 
node 8, node 8 (Fig. 4.4) will send a signaling containing BR&SW (BS) Status Code of the 
type SF,7,8,L,BS. The same will be for node 6 (Fig. 4.5): as soon as it receives signaling 
(SF,7,8,L,ID) containing the "Idle" code of SF2, it will send a signaling containing BR&SW 
Status Code (BS) of the type SF,7,6,L,BS. 

At the time when one of the two signalings with BS code generated by switching 
nodes is received by the termination nodes of the HP paths to be protected, the squelching of 
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the local termination (if any) of the LP channel to be used for the protection, that was chosen 
according to one of the criteria described above, takes place; while, at the nodes designed to 
realize the pass-through of the LP channels, the squelching of the local termination (if any) of 
the same LP channel will take place and also the subsequent pass-through connection, will 
take place. 

The Bridge & Switch action that is performed on the LP channel chosen according to 
the same criterion as above, is performed by every termination node of the HP paths to be 
protected, as soon as both signalings with BS Code (SF,7,6,L,BS and SF,7,8,L,BS) are 
detected at the two sides of the node itself. 

Thus, a stable state of the protected ring has been achieved. 

Referring initially to Figs. 5, consider the case where two failures (SF1 and SF2) 
occur nearly at the same time instant (or anyway failure SF2 occurs before the situation 
following SF1 is stabilized). For simplicity, paths (a) and (b) before the occurrence of the 
failures, are allocated similarly to what described for Fig. 1 and therefore the description of 
the allocations will not be repeated here. Upon the occurrence of the first failure (SF1) in 
span 6-7, the node 6 will send a failure signaling (SF,7,6,L,ED) from the West side and, 
similarly, it will send another failure signaling (SF,6,7,L,ID) from East side. See Figs. 5.1 and 
5.2. 

Suppose (Fig. 5.3) that the failure signaling (SF,6,7,L,ID) from the East side is able to 
reach node 8 before the second failure (SF2) occurs in span 7-8, which results in node 7 
isolated. Upon the second failure (SF2), node 8 (node adjacent to the failure) will send a 
corresponding failure signaling (SF,7,8,L,ID) from its East side. Anyway, the signaling of the 
second failure will follow the first failure one (Fig. 5.4). 

As soon as the signaling (SF,6,7,L,ID; SF,7,6,L,ID) containing the "Idle" code of the 
first failure reach the termination node 2 (Fig. 5.5) of path (a), this node will perform the 
BR&SW action by utilizing the LP AU-4 corresponding to the span affected by the first 
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failure (LP AU-4#7, in this instance). However, as soon as also the new signaling 
(SF,7,8,L,ID) of the second failure (SF2) reaches node 2, the BR&SW action, just realized, is 
removed (Fig. 5.6). 

Analogously (Fig. 5.7), as soon as the signaling (SF,6,7,L,ID; SF,7,6,L,ID) containing 
the "Idle" code of the first failure reach the termination node 4 of the path (b), this node will 
perform the BR&SW action by utilizing the LP AU-4 corresponding to the span affected by 
the first failure (LP AU-4#6 in this case). However, as soon as also the new signaling 
(SF,7,8,L,ID) relating to the second failure (SF2) reaches node 4, the BR&SW action, just 
realized, is removed (Fig. 5.8). 

Obviously, the actions to be taken before the just described temporary BR&SWs are 
the squelching of the local termination (if any) of the LP channel associated with the span 6-7 
both on the termination nodes of the paths to be protected, and on the nodes designed to 
realize the pass-through, as well as the pass-through connection of the LP channel itself: in 
order a node to perform such actions, the reception of at least one of the two signaling with 
"Idle" code generated by the switching nodes is enough to the interested node. 

At the same time, when the signaling (SF,7,6,L,ID) containing the "Idle" code of the 
first failure reaches node 8, node 8 will send a signaling containing the BR&SW (BS) status 
code of the type SF,7,8,L,BS (Fig. 5.9). The same will be for node 6: as soon as it receives 
the signaling (SF,6,7,L,ID) containing the "Idle" code of the first failure, it will send a 
signaling containing the BR&SW (BS) Status Code of the type SF,7,6,L,BS (Fig. 5.10). 

Because of the presence of the new signaling (SF,7,8,L,ID) concerning the second 
failure (SF2), node 6 will change again its signaling from SF,7,6,L,BS to SF,7,6,L,ID (Fig. 
5.11). 

At this stage both the signaling transmitted by node 8 containing the BR&SW Status 
Code and the two consecutive signaling transmitted by node 6 respectively containing the 
BS&SW (BS) and the "Idle" status codes are present in the ring. The signaling containing the 

12 



BS Status Code result, at the nodes detecting them, in the squelching of the local termination 
(if any) of the LP channel chosen for the protection according to one of the aforesaid criteria 
(for instance the LP channel corresponding to the allocation used in the span affected by the 
first failure, AU-4#6), as well as in the pass-through of such LP channel at the nodes 
designed to perform such a function. It is to be noted that, among the two signaling that 
consecutively emitted by node 6, the one containing "Idle" code does not remove the 
squelching and pass-through actions activated by the previous signaling (with BS code), since 
both refer to the same failed span: SF,7,6,L,BS and SF,7,6,L,ID. 

The node 9 (Fig. 5.12), receiving a signaling with BS code (SF,7,6,L,BS and 
SF,7,8,L,BS) from both its W and E sides, will perform the BR&SW action by utilizing the 
LP allocation related to one of the failured spans, for instance the one affected by the first 
failure (AU-4#6). Node 8, that receives the signaling containing the BS code (SF,7,6,L,BS) 
previously sent to it by node 6, will realize the BR&SW action (Fig. 5.13) by utilizing the LP 
allocation related to one of the failured spans, for instance the one affected by the first failure 
(AU-4#7). Some of the possible selection criteria have been mentioned above. 

Since the request that reaches both node 9 and node 8 with "Idle" code, is related to 
the failured span already indicated in the preceding request (SF,7,6,L,BS), the BR&SW 
action is maintained (Fig. 5. 14). 

When the request related to the second failure (SF2) and containing the BS code 
reaches node 6, the APS signaling is updated with the BS code, namely node 6 will send, 
from side W, the signaling SF,7,6,L,BS (Fig. 5.15). 

Node 4, as soon as it receives signaling with BS code from both sides, will realize the 
BR&SW action by utilizing the LP allocation related to one of the spans affected by a failure, 
for instance the one affected by the first failure (AU-4#6). 

Lastly, the node 2, as soon as it receives, from both its W and E sides, a signaling with 
BS code (SF,7,6,L,BS and SF,7,8,L,BS), will perform the BR&SW action (Fig. 5.16) by 
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utilizing the LP allocation related to one of the spans affected by a failure, for instance the 
one affected by the first failure (AU-4#7). 

Thus, a stable state in the protected ring is obtained. 

As said above, the scenario of the actions taken by the various nodes is different in the 
case where the failures do not occur at the same time. In this connection, two different sub- 
scenarios should be distinguished. With reference to Figs 1 to 3 and 6, the actions and the 
consequences related to the first sub-scenario are schematically listed below starting from a 
situation free of faults. 

The first failure (SF1) occurs. The node 6 sends SF,7,6,L,ID from the W side. The 
node 7 sends SF,6,7,L,ID from the side E (Fig. 2). 

SF,7,6,L,ID and SF,6,7,L,ID reach the termination nodes of paths (a) and (b). The 
termination nodes perform the BR&SW action for each path to be protected by utilizing the 
corresponding LP channels of the span affected by SF1. Path (a) is allocated on LP AU-4#7. 
Path (b) is allocated on LP AU-4#6 (Fig. 3). 

The nodes 6 and 7 adjacent to the failure SF1 send respective signaling with BS code 
(SF,7,6,L,BS and SF,6,7,L,BS) and a stable scenario of ring protected against SF1 is obtained 
(Fig. 3). 

SF2 occurs on span 7-8: node 7 is isolated (Fig. 6.1). Node 8 sends SF,7,8,L,ID from 
the side E (Fig.6.2). 

The BR&SW action (both the BR&SW and the pass-through at the intermediate 
nodes) performed for path (a) is removed (Figs. 6.3 and 6.4). The BR&SW action (both the 
BS&SW and the pass-through at the intermediate nodes) performed for path (b) is removed 
(Figs. 6.5 and 6.6). 

Node 6 receives the signaling SF,7,8,L,ID and sends SF,7,6,L,ID (Fig. 6.7). 
The node 8 receives from node 6 the signaling SF,7,6,L,ID and sends SF,7,8,L,BS 
(Fig. 6.8). 
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Node 6 receives the signaling SF,7,8,L,BS and sends SF,7,6,L,BS (Fig. 6.9). 

Nodes 2 and 8 receive the signaling SF,7,8,L,BS and SF7,6,L,BS and perform the 
BR&SW action by utilizing for instance the LP channels with AU-4 corresponding to that of 
the first failed span (LP AU-4#7). The scenario becomes stable for the path (a) (Figs. 6.10 
and 6.11). 

Nodes 4 and 9 receive the signaling SF,7,8,L,BS and SF,7,6,L,BS and perform the 
BR&SW action by utilizing for instance the LP channels with AU-4 corresponding to the one 
of the first failed span (LP AU-4#6). The scenario becomes stable for path (b) (Figs. 6.12, 
6.13). 

The squelching actions of the local termination (if any) of the LP channel chosen for 
the protection according to one of the criteria already described and the subsequent pass- 
through of the same LP channel at the intermediate nodes come before the BR&SW actions 
just described and are performed with the rules already pointed out for the two previous 
scenarios. 

With reference to Figs. 1 to 3 and 7, the actions and the consequences related to the 
second sub-scenario of double failure at different times will now be schematically listed in 
the following, still starting from a faultless situation. 

The first failure (SF1) occurs. Node 6 sends SF,7,6,L,ID from the W side. Node 7 
sends SF,6,7,L,ID from the E side (Fig. 1). 

SF,7,6,L,ID and SF,6,7,L,ID reach the termination nodes of the paths (a) and (b). The 
termination nodes perform the BR&SW action for each path to be protected by utilizing the 
corresponding LP channels of the span affected by SF1. The path (a) is allocated on LP AU- 
4#7. The path (b) is allocated on LP AU-4#6 (Fig. 2). 

The nodes 6 and 7 adjacent to failure SF1 receive the signaling with ID code 
(SF,7,6,L,ID and SF,6,7,L,ID), send respective signaling with BS code (SF,7,6,L,BS and 
SF,6,7,L,BS) and a stable scenario of ring protected against SF1 is obtained (Fig. 3). 

15 



SF2 occurs in span 7-8: node 7 is isolated (Fig. 7.1). Node 8 sends SF,7,8,L,ID from 
the E side (Fig. 7.2). 

The node 8, as a node adjacent to the failure and as a termination node, evaluates 
whether the already protected paths can still be protected. In the affirmative, no action is 
taken; in the negative, the BR&SW action is removed (Fig. 7.3). 

Node 9 receives the SF,7,8,L,ID request and evaluates whether the already protected 
paths can still be protected. In the affirmative, no action is taken; in the negative, the 
BR&SW action is removed (Fig. 7.4). 

Node 2 receives the SF,7,8,L,ID request and evaluates whether the already protected 
paths can still be protected. In the affirmative, no action is taken; in the negative, the 
BR&SW action is removed (Fig. 7.5). 

Node 4 receives the SF,7,8,L,ID request and evaluates whether the already protected 
paths can still be protected. If yes, no action is taken; if not, the BR&SW action is removed 
(Fig. 7.6). 

As soon as node 6 receives the SF,7,8,L,ID signaling, it updates its request by 
inserting the "Idle" status code, of the type SF,7,6,L,ID. After a further signaling exchange, 
the nodes adjacent to the failure update the respective signaling by inserting "BR&SW" (BS) 
status code. 

At this point only signaling with BS code are traveling in the ring that is failured by 
SF1 and SF2 and therefore a stable scenario for paths (a) and (b) towards the failures SF1 and 
SF2 has been achieved. 

It will be recognized that the first sub-scenario results in a rather simple 
implementation since it is not necessary to store the failure "history" but, at the same time, 
traffic is not safeguarded in an optimal manner because the BR&SW is always removed. On 
the contrary, the second sub-scenario safeguards the traffic in a better manner but it is more 
difficult to be implemented because the traffic "history" shall be stored. 
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Having analyzed in detail the single-failure and the double-failure situations 
(simultaneous, nearly simultaneous or at different times), we will go on in describing 
schematically the actions that each network node must perform (and the corresponding 
consequences) when the failures are cleared and the ring functionality is restored. 

Start from a stable situation of two failures SF1, SF2: in this situation, node 7 is 
isolated (Fig. 8.1) and only signalings with BS code (SF,7,8,L,BS and SF,7,6,L,BS) are 
traveling in the ring. Consider to clear first SF1 : the node 7, no longer isolated, begins to send 
the APS signaling with "Idle" code related to the span affected by a failure (SF2) still present 
between the nodes 8 and 7 (SF,8,7,L,ID) (Fig. 8.2). 

Since the LP allocation of the span 7-6 had been chosen, the BR&SW (and squelching 
of the any local termination of the LP channel utilized) action at node 4 must be removed. 
Similarly, as soon as also the SF,8,7,L,ID signaling reaches the other path termination nodes 
(2, 9, 8), the BR&SW and any local squelching action is removed also at such nodes 2, 9, 8 
(Figs. 8.3 to 8.5). The removal of "BR&SW" at the termination nodes is accompanied by the 
removal of the pass-through (and of any local squelching) from the intermediate nodes that 
have performed the pass-through of the LP channel heretofore utilized for the protection. 
Since the signalings present at the intermediate nodes are related to the same span affected by 
a failure, such nodes can perform, if required, the pass-through of the LP channels, related to 
the current failure, to be utilized for the path protection. 

The node 8, as a node adjacent to the failure SF2, receives SF,8,7,L,H> and changes 
the code of its signaling from SF,7,8,L,BS to SF,7,8,L,ID (Fig. 8.6). Such signaling with ID 
code gradually reaches all the termination nodes (9, 2, 4) showing them in this way that a 
single failure (SF2) is present. The termination nodes in turn will execute the BR&SW action 
(Figs. 8.8 to 8.10) by utilizing the LP channels that correspond to the failured span (for path 
(a) the LP AU-4#6 will be utilized, for path (b) the LP AU-4#7 will be utilized). 
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The nodes (7, 8) adjacent to the failure still present (SF2) will send corresponding 
signaling with BS code (SF,8,7,L,BS and SF,7,8,L,BS) and a single-failure stable condition 
will be achieved (Figs. 8.1 1, 8.12). 

As soon as also SF2 is cleared, the ring will reach the faultless stable condition (Figs. 
8.13, 8.14), with the progressive removal of the "Bridge" and "Switch" actions from all the 
path termination nodes and the consequent signalings with "No Request, Idle" code 
(NR,9,8,S,ID and NR,6,7,S,ID) by all the ring nodes, including nodes (7, 8) adjacent to the 
just cleared failure (SF2). 

Start now from a stable situation of two failures SF1, SF2 (Fig. 9.1): in this situation 
node 7 is isolated and only signalings with BS code (SF,7,8,L,BS and SF,7,6,L,BS) are 
traveling in the ring. Consider to clear SF2 first: node 7 (Fig 9.2), no longer isolated, begins 
to send the APS signaling with "Idle" code (SF,6,7,L,ID) related to the span affected by 
failure (SF1) still present between nodes 6 and 7. 

Since just the LP allocation of the span 7-6 had been chosen, the BR&SW action at 
node 8 can be maintained (Fig. 9.3). Similarly, the SF,6,7,L,ID signaling reaches the other 
path termination nodes (9, 2, 4) but the BR&SW action is maintained also at such nodes 9, 2, 
4 (Figs. 9.4 to 9.6). 

The same processing is carried out at intermediate nodes that perform the pass- 
through of the LP channels used for the protection: the pass-through is maintained. 

Finally, also node 6 adjacent to the failure SF1 receives SF,6,7,L,ID and will send the 
corresponding signaling with ID code (SF,7,6,L,ID), reaching a stable scenario with "BS" 
signalings all over the ring. 

As soon as also SF1 is cleared, the ring will reach the faultless stable condition, with 
the progressive removal of the "Bridge" and "Switch" actions from all the path termination 
nodes and the consequent signaling with "No Request, Idle" code (NR,5,6,S,ID and 
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NR,8,7,S,ID) issued by all the ring nodes, including nodes (6, 7) adjacent to the just cleared 
failure (SF2). See Figs. 9.7 and 9.8. 

In view of the above detailed description, relating to some cases of single or double 
failure, the person skilled in the art can easily devise the actions that every node must 
perform in the event of a failure on other spans and/or in the case where more than two 
failures occur. Naturally, the present invention is applicable to all these cases and its scope 
covers all these cases and is limited only by the following claims. 

As far as the practical realization is concerned, it will be understood that all the 
actions performed by every node or network element are the known Pass- Through, Bridge 
and Switch, squelching of any terminations of the Low-Priority channels involved in the 
protection and transmission of signaling, substantially of known type, actions. Therefore, the 
implementation of the present method does not require to change the physical structure of the 
existing network elements used in ring networks protected against possible failures. Any 
modifications must be carried out at level of consequent actions performed by the nodes 
affected by the protection mechanism, according to signalings already provided for and 
present in the standardized protocol and on the ground of ring map information, already 
provided for and processed, as well as traffic map that carries the allocation time-slot 
information, in every ring span of the single path that is installed. 

Finally it is pointed out that, although the present invention has been described in 
detail with reference to SDH synchronous transmission, it applies, in similar manner, to other 
types of synchronous transmission, typically SONET. The fact that this type of signals has 
not been taken into account in the description shall not be interpreted as a limitation but 
merely as an example and in order to render the description clear. Therefore, for the purposes 
of the present description and of the annexed claims, the terminology used for SDH 
transmissions will include at least the corresponding SONET terminology and shall be read in 
this perspective. 
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